Crypto Tech News

Let's Encrypt plans to implement Merkle Tree Certificates to add post-quantum authentication to the web without sacrificing the speed and reliability of TLS. This proactive shift addresses the growing urgency of securing web traffic against future quantum computers capable of forging digital signatures in real time.

Global money laundering has reached an unprecedented scale, operating as an illicit enterprise whose estimated value would make it the third-largest industry in the world behind commercial property. This staggering financial footprint underscores the critical need for advanced technological and regulatory solutions to combat sophisticated economic crimes and track illicit digital flows.

A recently published PDF offers an accessible guide to lattice-based cryptography, a key mathematical framework proposed for securing data against future quantum computing threats. The document breaks down the complex fundamentals of lattice structures, providing tech professionals with a clear and approachable foundation in next-generation post-quantum encryption.

A Google employee has been charged with insider trading after allegedly using confidential information to place a $1 million bet on the prediction market Polymarket regarding a specific search term. The complaint from the Southern District of New York marks the second recent insider trading case involving the platform in just over a month.

A recent post criticizing Stripe for failing to prevent friendly fraud has sparked significant discussion on Hacker News. The author argues that despite possessing a massive amount of user data and sophisticated signals, the payment processor is not doing enough to stop these fraudulent disputes.

Spain blocked prediction markets Polymarket and Kalshi for operating without a required gambling license. This regulatory action highlights growing concerns regarding the real-world risks of such platforms, which critics argue incentivize dangerous behaviors ranging from insider leaks to the tampering of critical infrastructure sensors.

A new visual guide explains the mechanics of Shamir's Secret Sharing, a cryptographic method used to securely distribute sensitive information. The breakdown illustrates how threshold secret sharing functions by dividing data into multiple parts, ensuring the original secret can only be recovered when any k of n distributed shares are combined.

Scammers are exploiting a loophole to send spam links from a trusted internal Microsoft email address normally used for official account alerts. This vulnerability makes the phishing emails appear highly legitimate, significantly increasing the risk of users falling for the deceptive campaigns.

Technology professionals discussing the article emphasize that prioritizing high salaries often leads to career dissatisfaction, making workplace integrity essential for finding ethical employers during the current AI and crypto gold rushes. Commenters advocate for transparency when serving established industries and defend the enduring ethical standards of traditional professions like accounting against the negative impacts of private equity ownership.

A Spanish court has declined to fine NordVPN for refusing to comply with a mandate to block pirated LaLiga football streams. Although the initial order required VPN providers to restrict access to the illegal broadcasts, the court ultimately refused to punish the company for its non-compliance.

Apple's latest corecrypto release includes quantum-secure ML-KEM and ML-DSA algorithm implementations along with mathematical proofs verifying their compliance with FIPS 203 and FIPS 204 standards. Additionally, the company has published the formal verification libraries and tools utilized to achieve these unprecedented correctness guarantees for production-grade cryptographic software.

The launch of a new peer-to-peer platform named Freenet has sparked backlash after a dormant board repurposed the original project's funding and name to build a new system that abandons anonymity. The ousted original development team continues their censorship-resistant and privacy-focused work under the rebranded name Hyphanet. Critics accuse the new Freenet of capitalizing on the original project's legacy while fundamentally diverging from its core design principles.

GitHub is investigating unauthorized access to its internal repositories. The company stated there is currently no evidence indicating that customer data or external repositories were compromised by the breach.

Minnesota is the first state to officially ban prediction markets, passing a law that makes it a felony for platforms like Kalshi and Polymarket to operate within its borders. Although dozens of states have previously taken legal action against the controversial industry, this marks the first comprehensive legislative ban on event contracts in the United States.

A compromised npm maintainer account recently published over 600 malicious versions across more than 300 popular packages in an attack dubbed Mini Shai-Hulud. This widespread supply chain incident impacts over 15 million monthly downloads by injecting malicious code into widely used libraries like size-sensor and timeago.js. Developers are advised to immediately audit their dependencies and ensure they are running secure versions.

Iran has launched an insurance service backed by Bitcoin for shipping companies seeking to transit the Strait of Hormuz. The semi-official Fars news agency reported the initiative, citing documents from the country's Ministry of Economy and Financial Affairs.

A graduate student has developed a powerful new cryptographic tool by harnessing the complexity of mathematical proofs. This approach utilizes highly advanced and unknowable math to create a robust new method for securely hiding digital secrets. The innovation represents a significant advancement in modern data encryption technologies.

This guide details practical SQL query patterns used to detect transaction fraud, sharing exact queries to identify red flags like rapid transaction velocity and impossible geographical distances. It also highlights the use of advanced window functions to analyze merchant clusters and track unusual off-hours buying behavior.

Readers reminisce about bypassing early shareware DRM and payment enforcement in classic games like Scorched Earth and Escape Velocity by editing game files or altering system clocks. The discussion highlights the forgiving attitudes of early software creators toward piracy and local cheating. Additionally, the thread mourns the passing of Escape Velocity co-creator Peter Cartwright, noting that his Kickstarter to remaster the game was successfully funded after his death.

Education technology company Instructure paid a ransom to hackers after its Canvas learning management system was breached twice. In exchange, the cybercriminals returned the compromised personal data of 275 million users across more than 8,800 institutions. Instructure assured its users that no customers will face further extortion from this incident.

A sophisticated supply-chain attack compromised 42 TanStack packages on the npm registry after an attacker exploited GitHub Actions vulnerabilities to publish 84 malicious versions. The breach chained a pull request exploit with cache poisoning and OIDC token extraction, prompting developers to review the official postmortem and audit their dependencies.

Google's threat intelligence group reported that criminal hackers likely used an AI model to discover and weaponize a major software vulnerability, citing the exploit script's textbook formatting and hallucinated details as evidence. However, readers note that while these markers strongly indicate the code was generated by an AI, they do not definitively prove the model was used to find the underlying bug.

A sophisticated cyber campaign is exploiting a malicious Obsidian note-taking app plugin to deploy a new remote access trojan named PHANTOMPULSE. The malware is specifically targeting victims operating within the finance and cryptocurrency sectors.

Following a massive ransomware attack that compromised 44,000 web hosting servers through an authentication bypass, cPanel has issued critical emergency security updates. The latest patch addresses the initial exploit alongside three additional newly discovered vulnerabilities in the platform. Administrators are urged to apply these updates immediately to secure their cPanel and WHM environments.

Brazil's central bank-backed instant payment platform, Pix, is rapidly capturing market share and disrupting the traditional financial landscape. This massive consumer shift is placing significant competitive pressure on global credit card giants Visa and Mastercard. As a result, these legacy networks must adapt their strategies and innovate to defend their dominance in the Brazilian market.

A recent report highlights how insider traders are continuously exploiting the oil futures market to generate massive profits at the direct expense of everyday consumers. These ongoing manipulative practices undermine market integrity and inflict severe financial harm, prompting urgent calls for stricter regulatory oversight to protect retail investors.

Coinbase is reducing its workforce by approximately 14% to streamline operations and better position the business for the future. The decision was communicated to employees via an internal email that outlines the reasons for the cuts and the support available for affected staff.

Unlike Bitcoin's fixed hash model, Monero utilizes a unique proof of work algorithm called RandomX that requires executing random, CPU-friendly programs over a large memory dataset. This distinct approach allows the network's mining process to behave fundamentally differently from ASIC-first systems.

The anti-tamper DRM software Denuvo has now been successfully cracked across all single-player games it previously secured. This milestone represents a major, albeit temporary, victory for the cracking community and has sparked widespread celebration among piracy enthusiasts. Game developers may now need to explore alternative digital rights management strategies to protect future releases.

A fraudulent scheme targeting Chinese nationals has led to the closure of numerous care homes and hotels across Japan after scammers sold Japanese Business Manager visas disguised as real estate investments. Fraudsters purchased cheap, abandoned rural properties at rock-bottom prices and resold them at massive markups, but the collapse of the operation has left foreign investors with worthless buildings and no visas.